Massiv IPTV-lure targeting campaign
Campaign
Summary
Hide ▲
Show ▼
The Massiv mobile-malware campaign is using fake IPTV apps and a Portuguese government-app lure to steal identities and banking access, expanding fraud risk for users who sideload apps. The operation has been observed across Spain, Portugal, France, and Turkey, showing a multi-country delivery pattern. Researchers say the lure pattern has grown over the past eight months.
Related Happenings
BTMOB phishing campaign targeting Brazil and Latin America
Campaign
H score39
First: 29.05.2026 00:10
Last: 29.05.2026 00:10
Sources 1
About this happening:
**BTMOB** phishing activity is using localized fake-app lures to target users in **Brazil** and **Latin America**, increasing the risk of malicious installs and account compromise...
BTMOB phishing campaign targeting Brazil and Latin America
CampaignAbout this happening: **BTMOB** phishing activity is using localized fake-app lures to target users in **Brazil** and **Latin America**, increasing the risk of malicious installs and account compromise...
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
Campaign
H score33
First: 11.05.2026 18:15
Last: 11.05.2026 18:15
Sources 1
About this happening:
The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
CampaignAbout this happening: The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
NGate Android Brazil fake-app and fake-lottery campaign
Campaign
H score37
First: 21.04.2026 12:00
Last: 21.04.2026 12:00
Sources 1
About this happening:
A **NGate** campaign has been active since **November 2025**, targeting primarily **Android devices in Brazil** and using **fake-app** and **fake-lottery** lures to spread a malic...
NGate Android Brazil fake-app and fake-lottery campaign
CampaignAbout this happening: A **NGate** campaign has been active since **November 2025**, targeting primarily **Android devices in Brazil** and using **fake-app** and **fake-lottery** lures to spread a malic...
Perseus IPTV-lure distribution campaign targeting Europe and the Middle East
Campaign
H score36
First: 19.03.2026 14:43
Last: 19.03.2026 14:43
Sources 1
About this happening:
The **Perseus** distribution campaign is actively pushing **Android malware** through **phishing sites** and **IPTV-lure apps**, increasing the risk of **device takeover** and **f...
Perseus IPTV-lure distribution campaign targeting Europe and the Middle East
CampaignAbout this happening: The **Perseus** distribution campaign is actively pushing **Android malware** through **phishing sites** and **IPTV-lure apps**, increasing the risk of **device takeover** and **f...
IPTV app lure campaign distributing Massiv Android banking malware
Campaign
H score25
First: 19.03.2026 12:13
Last: 19.03.2026 12:13
Sources 1
About this happening:
A **recent IPTV app lure campaign** is distributing **Massiv Android banking malware**, putting users who seek **free or low-cost live sports broadcasts** at risk of device compro...
IPTV app lure campaign distributing Massiv Android banking malware
CampaignAbout this happening: A **recent IPTV app lure campaign** is distributing **Massiv Android banking malware**, putting users who seek **free or low-cost live sports broadcasts** at risk of device compro...
Timeline
-
19.02.2026 12:00 2 articles · 4mo ago
Massiv Android banking malware uses IPTV-app lures across multiple countries
Campaign Scope UpdateThreatFabric identifies Massiv as a new Android banking malware that poses as an IPTV app to steal digital identities and access online banking accounts. The malware uses screen overlays, keylogging, and remote control through Android’s MediaProjection API and Accessibility Service UI-tree extraction, and it was observed targeting a Portuguese government app connected with Chave Móvel Digital. ThreatFabric also says fake IPTV app droppers have increasingly targeted users in Spain, Portugal, France, and Turkey over the past eight months, with some cases involving new bank and service accounts opened in the victim’s name.
Show sources
- New 'Massiv' Android banking malware poses as an IPTV app — www.bleepingcomputer.com — 19.02.2026 12:00
- New 'Massiv' Android banking malware poses as an IPTV app — www.bleepingcomputer.com — 19.02.2026 12:00